CVE-2024-34010CWE-428

Local privilege escalation due to unquoted search path vulnerability

High · published April 29, 2024

CVSS v3.0
8.2
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2024-04-29T15:48Z
EPSS history
Timeline
  • 29 APR 15:48Z
    Local privilege escalation due to unquoted search path vulnerability
    cvelistv5